Re: Windows 2000 local accounts

From: Roger Abell [MVP] (
Date: 11/16/05

Date: Tue, 15 Nov 2005 22:51:50 -0700

As you noted, system state will give you more than you will
want restored into the new system.
The old fashioned way still works, if the number of groups is
not too extensive.
net localgroup groupname1 > c:\grpfile.txt
net localgroup groupname2 >> c:\grpfile.txt
net localgroup groupname3 >> c:\grpfile.txt
etc editied into your dump bat file

The result grpfile.txt then has to get massaged so that
it is a bat file holding a long list of

net localgroup groupname1 /add
net localgroup groupname1 domain\globalgrpA /add
net localgroup groupname1 domain\globalgrpB /add

etc. based on the dumped info altered to define what
was there in the old system.

Today, we dump out the group info with a script, and
then define the groups and populate them with another.

Roger Abell
Microsoft MVP (Windows Server : Security)
MCDBA,  MCSE W2k3+W2k+Nt4
"Haim Beyhan" <> wrote in message 
> Hi,
> I have Windows 2000 member server in NT domain. I created several local
> groups that contain domain global groups and gave permissions to local
> groups on the directories. The server has some applications that do not 
> work
> as expected and I need to format and reinstall windows 2000. I don't want 
> to
> backup system state as it includes everything (registry etc). I need to
> backup only the local groups (SAM) and install new windows 2000 and 
> restore
> the local groups (SAM) in order to keep the groups with their SID's as 
> they
> were before.
> Is there any possibility to do that ?
> Is it enough to copy winnt\system32\config\SAM and then restore ?
> Thanks,
> Haim